DHS and NIST have provided the Institute for Information Infrustructure Protection (I3P) with $8.5M for a two year SCADA security research project. The research will be focused on six tasks.

1. Assess dependence on SCADA and its security
2. Account for the type and magnitude of SCADA interdependencies
3. Develop metrics for the assessment and management of SCADA security
4. Develop inherently secure SCADA systems
5. Develop cross domain solutions for information sharing
6. Transfer technology of these solutions into industry

Sandia will lead nine other I3P member organizations in the project: University of Illinois Urbana-Champaign, MIT Lincoln Laboratory, the MITRE Corporation, New York University, Pacific Northwest National Laboratory, SRI International, the University of Tulsa, the University of Virginia and Dartmouth College.

I had heard about this likely award when I visited Sandia in January. $8.5M offers a tremendous opportunity for progress in SCADA security. The challenge will be to use the funds efficiently with 10 different participating organizations and 6 different tasks. I know Sandia is looking forward to the challenge.